Bug #14456 Updated: mcrypt_create_iv: unterminated string & segfault
| From: | derick@php.net | Date: | Wed, 12 Dec 2001 14:15:34 +0000 |
| Subject: | Bug #14456 Updated: mcrypt_create_iv: unterminated string & segfault | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-73317@lists.php.net to get a copy of this message | ||
ID: 14456
Updated by: derick
Reported By: pumuckel@metropolis.de
Old Status: Open
Status: Analyzed
Bug Type: mcrypt related
Operating System: Linux 2.2.X
PHP Version: 4.1.0
Old Assigned To:
Assigned To: derick
New Comment:
Already known
Previous Comments:
------------------------------------------------------------------------
[2001-12-12 09:05:56] pumuckel@metropolis.de
mcrypt_create_iv(mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB), MCRYPT_RAND) produces following
error and causes apache to segfault:
Warning - String is not zero-terminated
source: zend_execute_API.c:274
Workaround:
Replace the mcrypt_create_iv call with:
$fp = fopen("/dev/random", "r");
$iv = fread($fp, mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB));
fclose($fp);
Better: Should be fixed.
------------------------------------------------------------------------
Edit this bug report at http://bugs.php.net/?id=14456&edit=1